Which of the following is the BEST control to mitigate attacks that redirect Internet traffic to an unauthorized website?
Answer(s): D
During a follow-up audit, an IS auditor learns that some key management personnel have been replaced since the original audit, and current management has decided not to implement some previously accepted recommendations. What is the auditor's BEST course of action?
Answer(s): B
An organization wants to classify database tables according to its data classification scheme. From an IS auditor's perspective, the tables should be classified based on the:
Answer(s): A
Management is concerned about sensitive information being intentionally or unintentionally emailed as attachments outside the organization by employees. What is the MOST important task before implementing any associated email controls?
While auditing a small organization's data classification processes and procedures, an IS auditor noticed that data is often classified at the incorrect level. What is the MOST effective way for the organization to improve this situation?
Answer(s): C
Post your Comments and Discuss ISACA CISA exam prep with other Community members: